This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/MGqAhkKHBACRFaiNXYcP9SHiMFE.roa File: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (raw, json) Hash identifier: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0= Subject key identifier: 30:6A:80:86:42:87:04:00:91:15:A8:8D:5D:87:0F:F5:21:E2:30:51 Certificate issuer: /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Certificate serial: 019B7A59DC7D08F07FDA35B127BB29D3E251 Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/MGqAhkKHBACRFaiNXYcP9SHiMFE.roa Signing time: Thu 01 Jan 2026 16:17:48 +0000 ROA not before: Thu 01 Jan 2026 16:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60033 IP address blocks: 185.61.136.0/24 maxlen: 24 185.61.137.0/24 maxlen: 24 185.61.138.0/24 maxlen: 24 185.61.139.0/24 maxlen: 24 2a02:7a60::/32 maxlen: 32 2a02:7a60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:dc:7d:08:f0:7f:da:35:b1:27:bb:29:d3:e2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Validity Not Before: Jan 1 16:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=306a8086428704009115a88d5d870ff521e23051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:62:55:4f:49:5f:a2:48:5e:fb:2e:3e:0c: 27:be:4c:8c:71:8b:4e:38:aa:0e:16:3e:4b:b3:35: f8:67:91:d6:27:7d:bf:f2:9d:fd:b7:44:da:c8:e7: ae:ca:ad:8b:d1:96:3d:62:fb:3a:af:0e:59:94:b1: 5e:87:b8:e6:f6:dc:95:3e:16:40:61:bc:b0:63:97: 32:0e:23:99:a1:22:6b:de:3b:6a:2a:04:83:76:9a: 00:96:09:eb:97:e9:51:7a:5e:57:8c:fb:2e:11:3f: dd:86:39:d8:de:97:72:30:43:a7:92:60:c4:3b:86: ee:9e:f6:b4:a8:ee:0f:51:c6:e2:2a:ac:d9:f3:86: 81:b4:dc:47:ee:5d:54:38:ea:53:49:3c:6b:0b:d7: 33:18:4c:71:21:87:40:5a:47:2b:9a:87:8b:2d:95: 9f:41:41:d5:0e:42:9e:a6:d1:c2:e4:33:7d:44:75: af:90:a8:d1:0a:2e:4a:dd:48:3e:5d:4a:98:aa:0d: 78:83:17:4d:68:07:f8:a7:e2:c0:da:17:58:f3:57: f9:88:d8:70:5a:83:cf:47:d7:42:04:a2:1e:7e:8d: 94:a4:ab:46:e7:d6:3b:67:d8:c5:25:be:ee:ca:49: 50:b4:d3:2b:96:b7:e0:7d:6a:9d:83:81:e0:37:53: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:80:86:42:87:04:00:91:15:A8:8D:5D:87:0F:F5:21:E2:30:51 X509v3 Authority Key Identifier: keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/MGqAhkKHBACRFaiNXYcP9SHiMFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.136.0/22 IPv6: 2a02:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 2f:7c:82:fe:e7:75:ec:b8:31:bb:e9:47:ec:65:4f:73:52:2e: cf:bd:04:14:8a:1b:bf:4d:42:6e:e5:40:2e:69:b8:c9:b6:08: 8d:8f:63:9a:aa:2e:e9:aa:9a:bb:61:a8:8e:db:fe:7b:36:0c: e8:9f:ba:f9:72:77:e4:93:9b:32:6b:c6:02:63:48:1a:75:f3: 39:ba:9f:4d:dd:7c:1f:a7:fe:f4:d7:17:6b:67:61:3d:10:7b: 1e:f0:af:26:d8:c3:24:f1:e5:98:e4:00:39:ad:6e:19:2c:6c: 91:5e:3d:f0:f2:02:86:2e:f3:35:c9:8a:ec:36:65:21:ef:23: 33:ed:7a:ba:e9:b9:92:59:fd:7d:1e:73:ee:fc:f6:c3:78:7e: df:d7:10:42:cc:43:3a:91:39:c9:39:0e:e9:07:3f:a6:77:7d: 10:e0:5f:d3:d5:44:f6:ed:5f:ec:f2:5c:ac:18:00:af:5b:58: a7:09:e9:31:c8:18:9b:b3:df:8b:a7:de:51:d7:d4:7f:e1:d2: f4:61:9f:6d:48:39:85:88:9f:42:0c:f9:d7:79:2e:b1:52:85: e5:bc:7f:be:82:e6:ad:85:f6:b2:d7:19:de:ad:8f:ef:8d:e4: e2:32:17:b5:5c:86:49:38:bc:4c:46:26:91:7d:1d:5d:6d:7f: 1e:c3:01:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wdx9CPB/2jWxJ7sp0+JRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4 MGI1ZWMwHhcNMjYwMTAxMTYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDZhODA4NjQyODcwNDAwOTExNWE4OGQ1ZDg3MGZmNTIxZTIzMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdRiVU9JX6JIXvsuPgwnvkyMcYtO OKoOFj5LszX4Z5HWJ32/8p39t0TayOeuyq2L0ZY9Yvs6rw5ZlLFeh7jm9tyVPhZA YbywY5cyDiOZoSJr3jtqKgSDdpoAlgnrl+lRel5XjPsuET/dhjnY3pdyMEOnkmDE O4bunva0qO4PUcbiKqzZ84aBtNxH7l1UOOpTSTxrC9czGExxIYdAWkcrmoeLLZWf QUHVDkKeptHC5DN9RHWvkKjRCi5K3Ug+XUqYqg14gxdNaAf4p+LA2hdY81f5iNhw WoPPR9dCBKIefo2UpKtG59Y7Z9jFJb7uyklQtNMrlrfgfWqdg4HgN1NaVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDBqgIZChwQAkRWojV2HD/Uh4jBRMB8GA1UdIwQY MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt MzQ0OTUyMjcxMGU3LzEvTUdxQWhrS0hCQUNSRmFpTlhZY1A5U0hpTUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3 LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuT2IMA0E AgACMAcDBQAqAnpgMA0GCSqGSIb3DQEBCwUAA4IBAQAvfIL+53XsuDG76UfsZU9z Ui7PvQQUihu/TUJu5UAuabjJtgiNj2Oaqi7pqpq7YaiO2/57Ngzon7r5cnfkk5sy a8YCY0gadfM5up9N3Xwfp/701xdrZ2E9EHse8K8m2MMk8eWY5AA5rW4ZLGyRXj3w 8gKGLvM1yYrsNmUh7yMz7Xq66bmSWf19HnPu/PbDeH7f1xBCzEM6kTnJOQ7pBz+m d30Q4F/T1UT27V/s8lysGACvW1inCekxyBibs9+Lp95R19R/4dL0YZ9tSDmFiJ9C DPnXeS6xUoXlvH++guathfay1xnerY/vjeTiMhe1XIZJOLxMRiaRfR1dbX8ewwFr -----END CERTIFICATE-----Generated at Fri Jan 9 13:33:18 2026 by rpki-client